Even 3 bits of randomness per character would yield 60 bits of total randomness, still too much to bruteforce.
For perspective, the total Bitcoin hashing rate right now is around 2^60 hashes per second. Thus brute-forcing the 100000 iterations of PBKDF2 for a password with 60 bits of entropy would require capacity comparable to a day of total Bitcoin miners' output.
Which apparently requires about 500 gigawatt-hours of energy.
This is on the edge of the "what if this hard drive contains the secret to hyperspace star drive" scenario, but hardly something to do for a regular police investigation.
Power management, mobile and firmware developer on Linux. Security developer at nvidia. Ex-biologist. Content here should not be interpreted as the opinion of my employer. Also on Mastodon and Bluesky.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
no subject
Date: 2023-04-19 12:20 am (UTC)For perspective, the total Bitcoin hashing rate right now is around 2^60 hashes per second. Thus brute-forcing the 100000 iterations of PBKDF2 for a password with 60 bits of entropy would require capacity comparable to a day of total Bitcoin miners' output.
Which apparently requires about 500 gigawatt-hours of energy.
This is on the edge of the "what if this hard drive contains the secret to hyperspace star drive" scenario, but hardly something to do for a regular police investigation.